commit 5f8fe438f944b89ad5eff107be93324a2dc29161 Author: Git-Admin Date: Tue Jan 13 11:36:51 2026 +0000 Initial commit - Release v1.0 diff --git a/.gitignore b/.gitignore new file mode 100755 index 0000000..eb72aa1 --- /dev/null +++ b/.gitignore @@ -0,0 +1,3 @@ +uploads/* +!uploads/.gitkeep +db_config.php diff --git a/index.php b/index.php new file mode 100755 index 0000000..64523a0 --- /dev/null +++ b/index.php @@ -0,0 +1,116 @@ +prepare("INSERT INTO posts (content, image_path, ip_address) VALUES (?, ?, ?)"); + $stmt->bind_param("sss", $content, $target_file, $ip); + + if ($stmt->execute()) { + $_SESSION['last_post_time'] = time(); + $msg = "Message posté avec succès !"; + } else { + $msg = "Erreur SQL."; // On évite d'afficher l'erreur précise aux utilisateurs + } + } + } +} +?> + + + + + Mini Forum CTF + + + + + + +

Bienvenue sur le Dev Web

+ +$msg

"; ?> + +

Poster un message

+ +

Derniers messages

+query($sql); + +if ($result->num_rows > 0) { + while($row = $result->fetch_assoc()) { + echo "

"; + echo "

Posté par IP: " . $row["ip_address"] . " le " . $row["created_at"] . "

"; + echo "

" . nl2br($row["content"]) . "

"; + if ($row["image_path"]) { + echo " Image user

"; + } + echo "

"; + } +} else { + echo "Aucun message pour le moment."; +} +?> + + + diff --git a/login.php b/login.php new file mode 100755 index 0000000..9e1c323 --- /dev/null +++ b/login.php @@ -0,0 +1,53 @@ + + + + +Admin Login + + +Retour au Forum + + + +

Félicitations !

Voici le flag du challenge Web :

+
+ Déconnexion +

+ + + +

Espace Administration

+ $msg

"; ?> + + + + + +